{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:I75KTV5GJJZBDGLYWLN4EHZTJX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fb164bace177418a661176760f2d810a2fae64a5c0ea0540817dd8e0d97680dd","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-23T08:50:37Z","title_canon_sha256":"1b79694215e5bf5aedbc41d825bb85a7e3776fa81706f17e8991e57a38f5b6ff"},"schema_version":"1.0","source":{"id":"2006.12834","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.12834","created_at":"2026-07-05T03:54:39Z"},{"alias_kind":"arxiv_version","alias_value":"2006.12834v3","created_at":"2026-07-05T03:54:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.12834","created_at":"2026-07-05T03:54:39Z"},{"alias_kind":"pith_short_12","alias_value":"I75KTV5GJJZB","created_at":"2026-07-05T03:54:39Z"},{"alias_kind":"pith_short_16","alias_value":"I75KTV5GJJZBDGLY","created_at":"2026-07-05T03:54:39Z"},{"alias_kind":"pith_short_8","alias_value":"I75KTV5G","created_at":"2026-07-05T03:54:39Z"}],"graph_snapshots":[{"event_id":"sha256:c81a799a41c594e4574b19c43e3b8bd23696c263d9de7199388a24ee6696c673","target":"graph","created_at":"2026-07-05T03:54:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.12834/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We propose a versatile framework based on random search, Sparse-RS, for score-based sparse targeted and untargeted attacks in the black-box setting. Sparse-RS does not rely on substitute models and achieves state-of-the-art success rate and query efficiency for multiple sparse attack models: $l_0$-bounded perturbations, adversarial patches, and adversarial frames. The $l_0$-version of untargeted Sparse-RS outperforms all black-box and even all white-box attacks for different models on MNIST, CIFAR-10, and ImageNet. Moreover, our untargeted Sparse-RS achieves very high success rates even for th","authors_text":"Francesco Croce, Maksym Andriushchenko, Matthias Hein, Naman D. Singh, Nicolas Flammarion","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-23T08:50:37Z","title":"Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.12834","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:29bc36efcba22a376cf2d653951cef7e162803676118e9396959871d05361175","target":"record","created_at":"2026-07-05T03:54:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fb164bace177418a661176760f2d810a2fae64a5c0ea0540817dd8e0d97680dd","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-06-23T08:50:37Z","title_canon_sha256":"1b79694215e5bf5aedbc41d825bb85a7e3776fa81706f17e8991e57a38f5b6ff"},"schema_version":"1.0","source":{"id":"2006.12834","kind":"arxiv","version":3}},"canonical_sha256":"47faa9d7a64a72119978b2dbc21f334dfff77583fda0a5ca821b9dd222305d12","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"47faa9d7a64a72119978b2dbc21f334dfff77583fda0a5ca821b9dd222305d12","first_computed_at":"2026-07-05T03:54:39.812286Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:54:39.812286Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"weTmcafCY2U3f0oEcfrPZoAlIhoREMjoARm2iNfKzQPAdfk6QeewikXgHOJtSt/Xsz8pZsbfFaA0GItwzqioDA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:54:39.812715Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.12834","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:29bc36efcba22a376cf2d653951cef7e162803676118e9396959871d05361175","sha256:c81a799a41c594e4574b19c43e3b8bd23696c263d9de7199388a24ee6696c673"],"state_sha256":"b65ab501a5d8892eb7e8f2f8521ec4f87486aa6eaaa76db43c465600d3bcb26f"}